Information security
ISO 27001
ISO/IEC 27001:2022 Information Security
Information risk managed against the Annex A control set, with a Statement of Applicability that stands up to scrutiny.
Typical timeline
Typically 4 to 6 months.
What you end up with
A certificate plus a Statement of Applicability that stands up to a customer's own auditor.
Who it applies to
Is this your situation?
IT and ITES firms, BPOs, and anyone whose enterprise customers send a security questionnaire.
01IT, ITES and software product companies
02BPOs and shared-service centres
03Any firm receiving enterprise security questionnaires
How we help
What we actually deliver
Risk assessment, SoA, control implementation, policy set, internal audit and Stage 1/Stage 2 preparation.
▪Asset inventory and information risk assessment
▪Statement of Applicability against Annex A
▪Policy set, access control and supplier security
▪Internal audit and Stage 1 / Stage 2 preparation
Often held together